Job Title: IT Security Specialist V
Location: Toronto, ON M5V 3A4 (Hybrid, 2 days on site, 3 days work from home – could be 4 days on site at some point)
Duration: 8+ Months (Possible Extension and Conversion based on business needs and performance)
Schedule: M-F, core business hours – 37.5 hours per week, 7.5 hours per day
 
Story behind the need:
Reason for request/why opened: Project support
Scope of Project: uplifting reporting space within GRC groups
Team Size/Culture: 10 people, collaborative working environment
Training Period: onboarding and hit the ground running
Selling Points of Position (CVP): Opportunity for long-term, very high visibility work with leadership team, opportunity to network and grow within bank
 
Candidate profile details:
Degree/Level of Education: Post secondary is a nice to have – work experience is more important
Certifications Required: Nothing required
Years of Overall Experience: 5+ years of experience
How will performance be measured: hitting deliverables and timelines
Preferred/Ideal Candidate Background: banking or financial experience is an asset, strong BI tool experience and advanced level Excel skills
 
Summary of the role:
The Security Metrics & Reporting Analyst is responsible for the ongoing execution and maintenance of cybersecurity metrics, including KRIs, KPIs, and operational security performance measures. This role supports consistent reporting across security domains by ensuring metrics are refreshed on schedule, validated for data quality, and delivered through dashboards and reporting packages for leadership and key stakeholders.
This role focuses on business-as-usual (BAU) metrics operations, including data hygiene, dashboard maintenance, reporting production, and metric issue resolution—partnering closely with security domain teams, data owners, and analytics stakeholders.
 
Key Responsibilities
Metrics Execution & Refresh Cycles

• Execute recurring security metric refresh processes (weekly, monthly, quarterly), ensuring deliverables are completed on schedule.
• Maintain metric reporting calendars and confirm metric owners provide inputs within defined timelines.
• Track metric completion, dependencies, and exceptions.

Reporting & Dashboard Maintenance

• Maintain dashboards and reporting outputs (e.g., Power BI/Tableau), including:
  • scheduled refresh validation
  • visual checks and formatting consistency
  • metric drill-down updates and annotations
• Produce recurring executive and operational reporting packages (monthly security scorecards, ops reviews, risk reports).

Data Quality & Validation

• Perform quality checks to validate data completeness and integrity, including:
  • variance analysis (e.g., large month-over-month changes)
  • missing / delayed data flags
  • logic validation (formula checks, filters)

• Document data quality issues and coordinate with data owners to resolve.
• Maintain metric definitions, calculation references, and source system documentation.

Metric Intake & Change Support

• Support change requests for metrics such as:
  • definition updates
  • threshold / limit changes
  • dashboard enhancements
• Track requests and ensure changes are reviewed/approved by the metric governance group, ORM challenge

Operational Support & Stakeholder Coordination

• Serve as a reliable point of contact for stakeholders seeking metric clarification or reporting support.
• Support preparation of talking points and narratives (what changed, why it changed, what action is needed).
• Assist in audit support requests by gathering metric artifacts and evidence of metric controls.

 
Key Skills & Competencies

• Strong organization and follow-through
• Structured thinker, process-oriented
• Data quality mindset and precision
• Professional communication and “clean” documentation
• Continuous improvement orientation

Success Criteria (first 6–12 months)

• On-time delivery of all metric refreshes and reporting cycles
• Reduced data quality issues and faster resolution of reporting defects
• Improved stakeholder satisfaction and trust in reporting outputs
• Documented and repeatable BAU reporting procedures

 
Must-have hard skills:
1.) 5+ years experience in reporting, analytics, operations, cybersecurity support, IT risk, or compliance functions.
2.) Proficiency with:

• Excel (intermediate-advanced)
• PowerPoint (clear reporting packages)
• At least one dashboarding tool (Power BI / Tableau / Qlik preferred)

Soft skills:
1.) Strong ability to communicate with technical and non-technical stakeholders
2.) Comfort working with recurring deliverables and managing deadlines
3.) Strong attention to detail; demonstrated ability to detect anomalies and errors in reporting
 
Nice-To-Have
1.) Familiarity with one or more cybersecurity domains.

• SOC / incident response metrics
• vulnerability metrics
• IAM metrics (joiner/mover/leaver, access recertification, PAM coverage)
• security awareness / phishing metrics

2.) Experience with security tooling data sources:

• ServiceNow, Archer
• Splunk / Sentinel
• Tenable / Qualys

3.) Knowledge of common security frameworks (NIST CSF, ISO 27001) 
 
At SPECTRAFORCE, we are committed to maintaining a workplace that ensures fair compensation and wage transparency in adherence with all applicable state and local laws. This position’s starting pay is: $ 75.00/hr.